Or use other statically compiled languages instead. Or at least use Java or O/S sandboxing features. At least in the web-facing parts of their apps. In any c

Or use other statically compiled languages instead. Or at least use Java or O/S sandboxing features. At least in the web-facing parts of their apps. In any case, this requires some planning ahead, and a mindset different from "agile". Maybe Java 9's AOT compilation can help in the process, but even if it could produce stand-alone programs, I think the dynamisms in Java code (reflection, annotations, dynamic class loaders) will make this infeasible for most code bases.